owl-users - Re: snort (any sniffer needed)

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / community lists wiki CVSweb mirrors signatures
bringing security into open environments

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [<thread-prev] [month] [year] [list]

Date: Tue, 22 Oct 2002 03:10:40 +0400
From: Solar Designer <solar@...nwall.com>
To: owl-users@...ts.openwall.com
Subject: Re: snort (any sniffer needed)

On Mon, Oct 21, 2002 at 02:21:38PM +0200, globi@...ff.com.pl wrote:
> I have just downloaded Owl-1.0, tested and
> think it is great ;) I am planning to use
> it as a rescue distribution but I haven't
> found any sniffer included on a cd. If you
> think this is a good idea to include a sniffer
> on a Owl distribution's cd I'd suggest snort ;)

Yes, a sniffer was and still is planned.  A reason to prefer snort is
because we also need an IDS.

Yet it is possible that we'll get tcpdump as well, patched to drop to
a pseudo-user and chroot.

-- 
/sd